The European Council has approved additional restrictive measures against six individuals involved in cyberattacks affecting critical infrastructure, state functions, and the storage or processing of classified information in EU member states. The sanctions target those responsible for ransomware campaigns against essential services such as health and banking.

The new listings include two members of the ‘Callisto’ (aka Seaborgium, Coldriver,” Star Blizzard, Gossamer Bear, ReUse Team, Dancing Salome, and BlueCharlie) cyberespionage group: Ruslan Peretyatko and Andrey Korinets. The Callisto group, linked to Russian Federal Security Service (FSB), has been accused of conducting cyber operations against EU member states and third countries. The group’s sustained phishing campaigns aim to steal sensitive data related to critical state functions, including defense and external relations.

Last December, the US and UK authorities sanctioned the group and charged two of it members: Ruslan Peretyatko and Andrey Korinets.

Oleksandr Sklianko and Mykola Chernykh, associated with the ‘Armageddon’ (aka Gamaredon and UAC-0010) hacker group, were also sanctioned. Supported by the Federal Security Service (FSB) of the Russian Federation, this group has carried out cyberattacks on the governments of EU member states and Ukraine through phishing emails and malware campaigns.

In addition, Mikhail Tsarev and Maksim Galochkin, key players in the deployment of the malware strains ‘Conti’ and ‘Trickbot’, have been sanctioned. Both are involved in the ‘Wizard Spider’ group, known for conducting ransomware campaigns across various sectors, including essential services like health and banking, causing significant economic damage in the European Union.

The EU horizontal cyber sanctions regime now applies to 14 individuals and four entities. Sanctions include asset freezes and travel bans, and EU persons and entities are prohibited from making funds available to those listed.

On Monday, the Council adopted its 14th package of sanctions against Russia, aimed at further crippling its economy and military efforts in Ukraine. These measures target key sectors such as energy, finance, and trade. Specifically, the package imposes sanctions on 116 individuals and entities threatening Ukraine’s sovereignty. The EU will now prohibit reloading Russian LNG (liquified natural gas) for transshipment to third countries and restrict new investments and services in LNG projects like Arctic LNG 2 and Murmansk LNG.

Additionally, the use of Russia’s SPFS financial messaging service is banned, and transactions with specified Russian financial institutions and crypto asset providers are restricted. EU operators are also prohibited from supporting Russia’s defense sector through various dual-use goods and technologies. The package also bans funding from the Russian state to EU political entities to prevent interference in democratic processes.

In transport, the EU has implemented a port access ban on vessels aiding Russia’s military efforts, such as transporting military equipment or stolen Ukrainian grain. The measure targets 27 vessels involved in deceptive shipping practices. This comprehensive set of sanctions aims to further isolate Russia and diminish its capability to continue its aggression against Ukraine.